CVEs published May 13, 2025
312 CVEs were published on May 13, 2025: 30 critical, 130 high. 10 are now in CISA KEV.
- Published
- 312
- Critical
- 30
- High
- 130
- Medium
- 141
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 10
- Fix available
- 129
Most affected products
- Microsoft Windows
- 36
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- 17
- Siemens SCALANCE LPE9403
- 12
- Adobe ColdFusion
- 8
- Intel(R) PROSet/Wireless WiFi Software for Windows
- 7
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 7
- Adobe Substance3D - Stager
- 6
- SAP_SE SAP Supplier Relationship Management
- 6
- Adobe Animate
- 5
- Intel(R) Server D50DNP and M50FCP boards
- 5
Critical 30
- CVE-2025-43559ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2025-43562ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe ColdFusion
- CVE-2025-43564ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-43560ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2025-43563ColdFusion | Improper Access Control (CWE-284)Adobe ColdFusion
- CVE-2025-43561ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-43567Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2025-30387Document Intelligence Studio On-Prem Elevation of Privilege VulnerabilityMicrosoft Azure AI Document Intelligence Studio
- CVE-2025-4658Authentication Bypass in OPKSSHOPKSSH · github.com/openpubkey/opkssh
- CVE-2025-3757Authentication Bypass in OpenPubKeyOPKSSH · github.com/openpubkey/openpubkey
- CVE-2025-22462An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows Ivanti Neurons for ITSM
- CVE-2025-32756A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionFortinet FortiNDR · Fortinet FortiCamera +3
- CVE-2025-33025A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-33024A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-32469A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-26390A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0).Siemens OZW672 · Siemens OZW772
- CVE-2025-26389A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0).Siemens OZW672 · Siemens OZW772
- CVE-2025-40628SQL Injection in DomainsPRODomainsPRO
- CVE-2025-22248[pgpool] Unauthenticated access to postgres through pgpoolVMware Bitnami
- CVE-2025-4632Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackSamsung Electronics MagicINFO 9 Server
- CVE-2025-42999Insecure Deserialization in SAP NetWeaver (Visual Composer development server)SAP_SE SAP NetWeaver
- CVE-2025-30012Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2024-46506NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lNetAlertX
- CVE-2025-28056rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
- CVE-2025-44831EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.
- CVE-2025-45857EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.
- CVE-2025-45858TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.
- CVE-2025-45861TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.
- CVE-2025-45863TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface
- CVE-2025-45865TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.
High 130
- CVE-2025-26646.NET, Visual Studio, and Build Tools for Visual Studio Spoofing VulnerabilityMicrosoft .NET · Microsoft Build Tools for Visual Studio +2
- CVE-2024-36292Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authIntel(R) Data Center GPU Flex Series for Windows driver
- CVE-2025-24308Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to potentIntel(R) Server D50DNP and M50FCP
- CVE-2025-22892Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unautheOpenVINO™ model server software maintained by Intel
- CVE-2025-22843Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated usEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-21094Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to poIntel(R) Server D50DNP and M50FCP boards
- CVE-2025-20618Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user toIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20100Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may allow a privileged usIntel(R) Xeon(R) 6 processor with E-cores
- CVE-2025-20083Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially enable escalation of priIntel(R) Slim Bootloader
- CVE-2025-20082Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards may allow Intel(R) Server D50DNP and M50FCP boards
- CVE-2025-20062Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20046Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20032Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to pIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20026Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to poIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20006Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20004Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow aIntel(R) Xeon(R) 6 processor E-Cores firmware
- CVE-2025-20003Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an authenticaIntel(R) Graphics Driver software installers
- CVE-2025-43565ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-43554Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2025-43553Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)Adobe Substance3D - Modeler
- CVE-2025-43569Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance3D - Stager
- CVE-2025-43571Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43570Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43568Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43549Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43572Dimension | Out-of-bounds Write (CWE-787)Adobe Dimension
- CVE-2025-43548Dimension | Out-of-bounds Write (CWE-787)Adobe Dimension
- CVE-2025-3744Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy OverrideHashiCorp Nomad Enterprise
- CVE-2025-43547Bridge | Integer Overflow or Wraparound (CWE-190)Adobe Bridge
- CVE-2025-43546Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Bridge
- CVE-2025-43545Bridge | Access of Uninitialized Pointer (CWE-824)Adobe Bridge
- CVE-2025-30330Illustrator | Heap-based Buffer Overflow (CWE-122)Adobe Illustrator
- CVE-2025-43557Animate | Access of Uninitialized Pointer (CWE-824)Adobe Animate
- CVE-2025-43556Animate | Integer Overflow or Wraparound (CWE-190)Adobe Animate
- CVE-2025-43555Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2025-30328Animate | Out-of-bounds Write (CWE-787)Adobe Animate
- CVE-2025-4660Remote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe AccessForescout SecureConnector
- CVE-2025-30325Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop Desktop
- CVE-2025-30326Photoshop Desktop | Access of Uninitialized Pointer (CWE-824)Adobe Photoshop Desktop
- CVE-2025-30324Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Photoshop Desktop
- CVE-2025-30322Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2023-31359Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting inAMD AIM-T Manageability API
- CVE-2023-31358A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting inAMD AIM-T Manageability API
- CVE-2025-27197Lightroom Desktop | Out-of-bounds Write (CWE-787)Adobe Lightroom Desktop
- CVE-2025-30318InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-0035Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbiAMD Cloud Manageability Service
- CVE-2024-36321Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrarAMD AIM-T Manageability Service
- CVE-2025-24063Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32707NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32705Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-32704Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-32702Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2025-30388Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for Univ… +2
- CVE-2025-30385Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29963Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29962Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29842UrlMon Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-29841Universal Print Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29840Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29838Windows ExecutionContext Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29833Microsoft Virtual Machine Bus (VMBus) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29831Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsoft W…
- CVE-2025-26677Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21264Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code CoPilot Chat Extension · Micro…
- CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29826Microsoft Dataverse Elevation of Privilege VulnerabilityMicrosoft Dataverse
- CVE-2025-30393Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-27468Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30386Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-30384Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-30383Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30382Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-30381Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30379Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30378Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-30377Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-30376Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30375Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-29979Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-29978Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-29977Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-29976Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-29975Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft PC Manager
- CVE-2025-29973Microsoft Azure File Sync Elevation of Privilege VulnerabilityMicrosoft Azure File Sync
- CVE-2025-29971Web Threat Defense (WTD.sys) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29970Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29969MS-EVEN RPC Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29967Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-29966Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-29964Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-36339A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulAMD Optimizing CPU Libraries
- CVE-2024-21960Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve privilegeAMD Optimizing CPU Libraries
- CVE-2025-30310Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)Adobe Dreamweaver Desktop
- CVE-2025-4428Remote Code ExecutionIvanti Endpoint Manager Mobile
- CVE-2025-47276Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2iChewKeanHo Actualizer
- CVE-2025-22460Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privilIvanti CSA
- CVE-2024-42446TOCTOU in SmmWheaAMI AptioV
- CVE-2025-4648A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.Centreon web
- CVE-2025-40582A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge ClientSiemens SCALANCE LPE9403
- CVE-2025-40581A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge ClientSiemens SCALANCE LPE9403
- CVE-2025-40574A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40566A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 UpdateSiemens SIMATIC PCS neo
- CVE-2025-32454A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-31930A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/ Siemens IEC 1Ph 7.4kW Child socket · Siemens IEC 1Ph 7.… +19
- CVE-2025-30176A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < VSiemens SIMATIC PCS neo · Siemens SINEC NMS +3
- CVE-2025-30175A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < VSiemens SIMATIC PCS neo · Siemens SINEC NMS +3
- CVE-2025-30174A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < VSiemens SIMATIC PCS neo · Siemens SINEC NMS +3
- CVE-2025-24007A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Siemens SIRIUS 3RK3 Modular Safety System · Siemens SIRIUS…
- CVE-2024-23815A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networksSiemens Desigo CC
- CVE-2025-4647A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVGCentreon web
- CVE-2025-4646A high privilege user is able to create and use a valid admin API token in centreon-webCentreon web
- CVE-2025-41645SMA: Sunny Portal demo system privilege escalationSMA www.sunnyportal.com
- CVE-2025-4474Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Functionvinoth06 Frontend Dashboard
- CVE-2025-4317TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File UploadCodexThemes TheGem
- CVE-2025-4473Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Functionvinoth06 Frontend Dashboard
- CVE-2025-22249VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)Vmware Aria Automation · VMware Cloud Foundation +1
- CVE-2025-4396Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL InjectionRelevanssi Premium · comesio Relevanssi – A Better Search
- CVE-2025-35471conda-forge openssl-feedstock writable OPENSSLDIRconda-forge openssl-feedstock · conda-forge miniforge
- CVE-2025-43011Missing Authorization Check in SAP Landscape Transformation (PCL Basis)SAP_SE SAP Landscape Transformation
- CVE-2025-43010Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))SAP_SE SAP S/4HANA Cloud Private Edition or on Premise (SCM…
- CVE-2025-43000Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)SAP_SE SAP Business Objects Business Intelligence Platform
- CVE-2025-30018Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2024-48766NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors rNetAlertX
- CVE-2024-56526An issue was discovered in OXID eShop before 7.oxid-esales/oxideshop-ce · oxid-esales/oxideshop-metapac… +1
- CVE-2025-28055upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit
- CVE-2025-28057owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.
Medium, low and unrated 152
- CVE-2025-4574Crossbeam-channel: crossbeam-channel vulnerable to double free on dropcrossbeam-channel · Red Hat Directory Server +6
- CVE-2024-48869Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when using Intel(R) TrusIntel(R) Xeon(R) 6 processor with E-cores when using Intel(…
- CVE-2024-47800Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privIntel(R) Graphics Driver software
- CVE-2024-47795Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potIntel(R) oneAPI DPC++/C++ Compiler software
- CVE-2024-47550Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalEndurance Gaming Mode software installers
- CVE-2024-46895Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an aIntel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-45371Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow an authenticated usIntel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-45333Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticIntel(R) Data Center GPU Flex Series for Windows driver
- CVE-2024-45332Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect brIntel(R) Processors
- CVE-2024-43420Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel AtoIntel Atom(R) processors
- CVE-2024-43101Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an Intel(R) Data Center GPU Flex Series for Windows driver sof…
- CVE-2024-39833Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalatioIntel(R) QAT software
- CVE-2024-39758Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow an authenticated usIntel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-31150Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure vIntel(R) Graphics Driver software
- CVE-2024-31073Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of prIntel(R) oneAPI Level Zero software
- CVE-2024-29222Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via lIntel(R) Graphics Driver software
- CVE-2024-28956Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow Intel(R) Processors
- CVE-2024-28954Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation Intel(R) Graphics Driver installers
- CVE-2024-28036Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of service via local accesIntel(R) Arc™ GPU
- CVE-2025-24495Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user Intel(R) Core™ Ultra Processors
- CVE-2025-23233Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated usEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22895Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow aEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22848Improper conditions check for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentialEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22844Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentialEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22448Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow an authenticated user toIntel(R) Simics(R) Package Manager software
- CVE-2025-22446Inadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to poteEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-21100Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enaIntel(R) Server D50DNP and M50FCP boards
- CVE-2025-21099Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege vIntel(R) Graphics software
- CVE-2025-21081Protection mechanism failure for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20629Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network Adapter E810 Series before version 4.60 may alloIntel(R) Ethernet Network Adapter E810 Series
- CVE-2025-20624Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow aEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20623Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Intel(R) Core™ processors
- CVE-2025-20616Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to pEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20612Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated usEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20611Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow aEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20108Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authentIntel(R) Network Adapter Driver installers for Windows
- CVE-2025-20104Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user tAdministrative Tools for some Intel(R) Network Adapters pac…
- CVE-2025-20103Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enabIntel(R) Processors
- CVE-2025-20101Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denialIntel(R) Graphics Drivers
- CVE-2025-20095Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentiallyIntel(R) RealSense™ SDK software
- CVE-2025-20084Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to pEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20079Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege viIntel(R) Advisor software
- CVE-2025-20076Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentialEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20071NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via locaIntel(R) Graphics Drivers
- CVE-2025-20057Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to pEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20054Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable deniaIntel(R) Processors
- CVE-2025-20052Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via locaIntel(R) Graphics software
- CVE-2025-20047Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenIntel(R) Core™ Ultra Processors
- CVE-2025-20043Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enabIntel(R) RealSense™ SDK software
- CVE-2025-20041Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version 32.0Intel(R) Graphics software for Intel(R) Arc™ graphics and I…
- CVE-2025-20039Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20034Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before vIntel(R) Server D50DNP and M50FCP boards
- CVE-2025-20031Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via locIntel(R) Graphics Drivers
- CVE-2025-20030Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow aEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20022Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to poEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20018Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privileIntel(R) Graphics Drivers
- CVE-2025-20015Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authenticated user to potenIntel(R) Ethernet Connection software
- CVE-2025-20013Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow aEdge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20012Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information discloIntel(R) Core™ Ultra Processors
- CVE-2025-20009Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards may allow a privilegeIntel(R) Server D50DNP and M50FCP boards
- CVE-2025-20008Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a privileged user to potIntel(R) Simics(R) Package Manager software
- CVE-2025-43566ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2025-30315Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2025-30316Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2025-30314Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2025-43551Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance3D - Stager
- CVE-2025-30329Animate | NULL Pointer Dereference (CWE-476)Adobe Animate
- CVE-2025-30320InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-30319InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-47280Umbraco.Forms has HTML injection vulnerability in 'Send email' workflowUmbraco.Forms.Issues · Umbraco.Forms +1
- CVE-2024-6364Server Identity Validation Bypass in Absolute Persistence®Absolute Security Absolute Persistence
- CVE-2025-29974Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29961Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29958Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29957Windows Deployment Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29956Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29955Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29954Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29839Windows Multiple UNC Provider Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29837Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29836Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29835Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29832Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29830Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29829Windows Trusted Runtime Interface Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-26685Microsoft Defender for Identity Spoofing VulnerabilityMicrosoft Defender for Identity
- CVE-2025-27488Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege VulnerabilityMicrosoft Windows 10 HLK · Microsoft Windows 11 HLK 22H2 +3
- CVE-2025-32703Visual Studio Information Disclosure VulnerabilityMicrosoft Visual Studio
- CVE-2025-30394Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-29968Active Directory Certificate Services (AD CS) Denial of Service VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-29960Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29959Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-26684Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Linux
- CVE-2025-47278Flask uses fallback key instead of current signing keypallets flask · flask
- CVE-2025-4427Authentication BypassIvanti Endpoint Manager Mobile
- CVE-2025-46721nosurf vulnerable to CSRF due to non-functional same-origin request checksjustinas nosurf · github.com/justinas/nosurf
- CVE-2025-31493Path traversal of collection names during file system lookupgetkirby kirby · getkirby/cms
- CVE-2025-30207Kirby vulnerable to path traversal in the router for PHP's built-in servergetkirby kirby · getkirby/cms
- CVE-2025-30159Kirby vulnerable to path traversal of snippet names in the `snippet()` helpergetkirby kirby · getkirby/kirby
- CVE-2024-12533Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This isPhoenix SecureCore Technology
- CVE-2025-22859A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may alloFortinet FortiClientEMS
- CVE-2024-35281An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.Fortinet FortiClientMac · Fortinet FortiVoiceUCDesktop
- CVE-2024-36340A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting AMD μProf
- CVE-2025-4649ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.Centreon web
- CVE-2025-32917Privilege escalation in jar_signatureCheckmk
- CVE-2025-40583A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge ClientSiemens SCALANCE LPE9403
- CVE-2025-40580A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40579A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40578A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions).Siemens SCALANCE LPE9403
- CVE-2025-40577A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40576A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40575A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40573A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40572A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40571A vulnerability has been identified in Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC SSO (Mendix 9 compatibSiemens Mendix OIDC SSO
- CVE-2025-40556A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versSiemens BACnet ATEC 550-440 · Siemens BACnet ATEC 550-441 +2
- CVE-2025-40555A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).Siemens APOGEE PXC+TALON TC Series
- CVE-2025-31929A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (Siemens IEC 1Ph 7.4kW Child socket · Siemens IEC 1Ph 7.… +21
- CVE-2025-24510A vulnerability has been identified in MS/TP Point Pickup Module (All versions).Siemens MS/TP Point Pickup Module
- CVE-2025-24009A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Siemens SIRIUS 3RK3 Modular Safety System · Siemens SIRIUS…
- CVE-2025-24008A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Siemens SIRIUS 3RK3 Modular Safety System · Siemens SIRIUS…
- CVE-2024-51447A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2).Siemens Polarion
- CVE-2024-51446A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Siemens Polarion
- CVE-2024-51445A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Siemens Polarion
- CVE-2024-51444A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Siemens Polarion
- CVE-2025-3916CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentiallySchneider Electric EcoStruxure™ Power Build Rapsody software
- CVE-2025-27696Apache Superset: Incorrect authorization leading to resource ownership takeoverApache Software Foundation Apache Superset · apache-superset
- CVE-2025-4339TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options UpdateCodexThemes TheGem
- CVE-2025-3107Newsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parametercontrid Newsletters
- CVE-2025-22246CVE-2025-22246 – UAA Private Key ExposureCloud Foundry UAA · Cloud Foundry CF deployment
- CVE-2025-43009Missing Authorization check in SAP Service Parts Management (SPM)SAP_SE SAP Service Parts Management
- CVE-2025-43008Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalSAP_SE SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
- CVE-2025-43007Missing Authorization check in SAP Service Parts Management (SPM)SAP_SE SAP Service Parts Management
- CVE-2025-43006Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)SAP_SE SAP Supplier Relationship Management
- CVE-2025-43005Information Disclosure vulnerability in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2025-43004Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)SAP_SE SAP Digital Manufacturing
- CVE-2025-43003Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)SAP_SE SAP S/4HANA
- CVE-2025-43002Missing Authorization check in SAP S4/HANA (OData meta-data property)SAP_SE SAP S4/HANA
- CVE-2025-42997Information Disclosure vulnerability in SAP Gateway ClientSAP_SE SAP Gateway Client
- CVE-2025-31329Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2025-30011Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2025-30010Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2025-30009Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2025-26662Cross-Site Scripting (XSS) vulnerability in the SAP Data Services Management ConsoleSAP_SE SAP Data Services Management Console
- CVE-2025-44039CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console.
- CVE-2025-45746In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service coZKTeco ZKBio CVSecurity
- CVE-2025-45859TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interfac
- CVE-2025-45864TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interfa
- CVE-2025-45866TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface
- CVE-2025-45867TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interfa
- CVE-2025-47204An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2.bootstrap-multiselect
- CVE-2025-47905Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, becavarnish-software Varnish Cache